Trusted Application Key Exchange in Isolated Computing Environments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure computing systems face performance degradation when responding to attacks from malicious models due to the need for one-by-one data verification to ensure integrity, which is not required in semi-honest models.
Innovation Solution
An information processing system with isolated calculation areas and a management unit that verifies the integrity of applications using authentication information, ensuring secure data encryption and decryption through secure environments, preventing data and application tampering without additional verification processing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If one-by-one data verification processing is performed to respond to malicious model attacks, then security against malicious models is improved, but computation amount increases and processing speed decreases
Solution Approach 1:
The patent applies preliminary action by verifying application integrity before data processing begins. The management unit verifies the integrity of applications (first and second applications) using authentication information stored in advance, and only transmits encryption keys to devices where integrity is verified. This preliminary verification ensures that only trusted applications can access encryption keys, eliminating the need for continuous one-by-one data verification during processing and thus maintaining high processing speed while ensuring security against malicious models.
2Reliability
If application integrity verification is performed using authentication information, then security against data tampering is improved, but system complexity increases
Solution Approach 1:
The patent introduces a management unit as an intermediary component that handles application integrity verification and encryption key transmission. The management unit receives authentication information from devices, verifies application integrity using stored verification information, and selectively transmits encryption keys through secure environments. This intermediary structure centralizes the verification logic, simplifying the overall system architecture while maintaining strong security against data tampering by ensuring only verified applications receive encryption keys.
Data Source
AI summary
In response to a request from a first device (100), a management unit (300) transmits a data encryption key to the first device (100) through a secure environment between the management unit (300) and the first device (100) when integrity of a first application running in an isolated calculation area is verified. The first device (100) encrypts target data using the data encryption key and transmits encrypted target data to a second device (200) through the first application. In response to a request from the second device (200), the management unit (300) transmits a data encryption key to the second device (200) through a secure environment between the management unit (300) and the second device (200) when integrity of a second application running in an isolated calculation area is verified. The second device (200) decrypts the encrypted target data using the data encryption key through the second application.